176 Configuring WSS System ParametersNN47250-102 (320666-G Version 02.01)9 In the Transmit Power box, specify the transmit power for the radio.10 Click Finish.Configure a Port for Wired AuthenticationA wired authentication port is an Ethernet port that has 802.1X authentication enabled for access control. Like wirelessusers, users that are connected to the WSS over Ethernet can be authenticated before they can be authorized to use thenetwork. However, data for wired users is not encrypted after they are authenticated.1 Access the Configure Wired Auth wizard:a Select the Configuration tool bar option.b In the Organizer panel, click the plus sign next to the WSS.c Click the plus sign next to System.d Select Ports.e Select the row for the port.f In the Task List panel, select Wired Auth.2 Select the fallthru authentication method from the Fall Through Authentication list box. The WSS usesthe fallthru method to try to authenticate a client if the client name or MAC address does not match theNote. If RF Auto-Tuning for power configuration is enabled, setting this valuehas no effect. The power level is controlled by RF Auto-Tuning.Note. For 802.1X clients, wired authentication works only if the clients are directlyattached to the wired authentication port, or are attached through a hub that does not blockforwarding of packets from the client to the PAE group address (01:80:c2:00:00:03). Wiredauthentication works in accordance with the 802.1X specification, which prohibits a clientfrom sending traffic directly to an authenticator’s MAC address until the client isauthenticated. Instead of sending traffic to the authenticator’s MAC address, the clientsends packets to the PAE group address. The 802.1X specification prohibits networkingdevices from forwarding PAE group address packets, because this would make it possiblefor multiple authenticators to acquire the same client.For non-802.1X clients, who use MAC authentication, Web-based AAA, or last-resortauthentication, wired authentication works if the clients are directly attached or indirectlyattached.Note. If you plan to specify a RADIUS server group, configure the group first, beforeusing the wizard. The wizard does not provide a way to configure RADIUS servers orgroups. (See “Viewing and Configuring RADIUS Settings” (page 285).)
